Appl. No. 10/660,225 

Amendment and Response dated April 3, 2007 
Reply to Office Action of March 13, 2007 

This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims: 

1. (Original) A system comprising: 

a security management system comprising: 

a network security feedback and control system 
wherein said security feedback and control system 
receives a plurality of normalized events and issues 
at least one normalized command in response to a 
predefined event in said plurality of normalized 
events . 

2. (Original) The system of Claim 1 wherein said network 
security feedback and control system comprises: 

a feedback and control manager wherein said feedback 
and control manager processes said at least one normalized 
event and generates said at least one normalized command. 

3. (Original) The security management system of Claim 2 
wherein said feedback and control manager includes at least one 
rules engine wherein said rules engine includes a rule having a 
condition object that uses information from said at least one 
normalized event. 

4. (Original) The system of Claim 1 further comprising: 

a managed node coupled to said security management 
system. 

5. (Original) The system of Claim 4 wherein said managed 
node further comprises: 

a security management agent executing on said managed 

node . 
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6. (Original) The system of Claim 5 further comprising: 

at least one managed product coupled to said security 
management agent wherein said at least one managed product 
forwards at least one of said normalized events to said 
security management agent and receives normalized commands 
from said security management agent. 

7. (Original) The system of Claim 1 further comprising: 

a security management agent coupled to said network 
security feedback and control system wherein said security 
management agent collects normalizes events and forwards 
said normalized events to said security management system. 

8. (Original) The system of Claim 7 further comprising: 

at least one managed product coupled to said security 
management agent wherein said at least one managed product 
transfers at least one normalized event to said security 
management agent . 

9. (Original) A system comprising: 

an event subscription filter; 

a feedback and control manager coupled to said event 
subscription filter. 

10. (Original) The system of Claim 9 further comprising: 
a knowledge database coupled to said feedback and 

control manager . 

11. (Original) The system of Claim 9 further comprising: 
a directory coupled to said feedback and control 

manager . 
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12. (Original) The system of Claim 11 further 
comprising : 

a configuration adapter connected between said 
feedback and control manager and said directory. 

13. (Original) The system of Claim 9 wherein said 
feedback and control system further comprises a rules engine 
coupled to said event subscription filter. 

14. (Original) The system of Claim 9 further comprising: 
a security management agent coupled to said event 

subscription filter. 

15. (Original) The system of Claim 14 further 
comprising : 

at least one managed product coupled to said security 
management agent 

16. (Original) A method comprising: 

receiving events from managed products by a network 
security feedback and control system; and 

using information in said events by said network 
feedback and control system in dynamically implementing a 
predefined security policy. 



GUNNISON, McKAY & 

HODGSON, L.L.P. 
Garden West Office Plaza 
1900 Garden Road. Suilc 220 
Momerey, CA 93940 

(831)655-0880 
Fax (831)655-0888 



17. (Original) A computer-program product comprising a 
computer-readable medium containing computer program code for a 
method comprising: 

receiving events from managed products by a network 
security feedback and control system; and 

using information in said events by said network 
feedback and control system in dynamically implementing a 
predefined security policy. 
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18. (Original) A structure comprising: 

means for receiving events from managed products by a 
network security feedback and control system; and 

means using information in said events by said 
network feedback and control system in dynamically 
implementing a predefined security policy. 

Claims 19-67. (Cancelled) 
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